@interfluidity This is a bit strong, and slightly misses the point. Don't forget all those request and response headers which are also hidden away from public gaze; they can carry some nasty shit too. But we don't want to see all that because it is noise, and noise can be used to hide even more nasty stuff. The important thing is that you know you are talking to the server you want to be talking to.